Skip to content
Cm-wp vulnerabilities
Newest
-
unknown social slider feed, cm-wp social slider widget +1 more
Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets
CVE-2024-10149
4.8 Medium
-
cm-wp clearfy, creativemotion clearfy cache – wordpress optimization plugin, minify html, css & js, defer +1 more
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cache
CVE-2024-13338
5.3 Medium
-
cm-wp clearfy, creativemotion clearfy cache – wordpress optimization plugin, minify html, css & js, defer +1 more
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'
CVE-2024-13337
4.3 Medium
-
unknown social slider feed, cm-wp social slider widget +1 more
Social Slider Feed < 2.2.9 - Admin+ Stored XSS
CVE-2025-0717
3.5 Low
-
cm-wp woody code snippets, creative motion, will bontrager software, llc woody ad snippets +1 more
WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
CVE-2024-35751
6.5 Medium
-
cm-wp woody code snippets, themeisle woody code snippets – insert php, css, js, and header/footer scripts +1 more
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass
CVE-2020-36759
4.3 Medium
-
cm-wp auto featured image, themeisle auto featured image (auto post thumbnail) +1 more
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
CVE-2023-0477
8.8 High
-
creativemotion titan anti-spam & security, cm-wp titan anti-spam \& security +1 more
Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
CVE-2022-2877
5.3 Medium
-
cm-wp auto featured image, themeisle auto featured image (auto post thumbnail) +1 more
Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting
CVE-2021-24932
6.1 Medium
-
cm-wp social slider widget
Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)
CVE-2021-24196
5.4 Medium